More work with sessions, .htaccess gone put in your apache VHost block

Signed-off-by: devxdev <xdev@devxdev.com>